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Status of the Claims : 

Claims 1, 3, 5, 10 and 13 are amended; 
Claims 2, 4, 6-9, 11-12 and 14 are original; 
Claims 1-14 are now pending in this application. 

Listing of Claims : 

This complete listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1 . (Currently amended) A method of conducting an electronic transaction 
over a public communications network with an account number, comprising: 

electronically g enerating a per-card key associated with said account number; 
electronically g enerating a message authentication code using said per-card 

key; 

electronically converting said message authentication code into a pseudo 

expiration date; 

electronically g enerating an authorization request for said transaction, said 
request having an expiration date field containing said pseudo expiration date; and 

electronically verifying said message authentication code based on said 
pseudo expiration date. 

2. (Original) The method of claim 1 wherein said electronic transaction is 
conducted over a public communications network and a payment network including an issuer of 
said account number, and wherein said account number has a real expiration date, further 
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comprising the steps of generating a second authorization request including said real expiration 
date and forwarding said second request to said issuer for approval of said transaction. 



3. (Currently amended) A method of conducting an electronic transaction 

over a public communications network with a payment account number having an associated 
pseudo account number, comprising: 

(a) electronically g enerating by a service provider a per-card key associated 
with said pseudo account number using said payment account number and said pseudo account 
number; 

(b) creating a secure payment application for use in said transaction including 

said per-card key; 

(c) using said per-card key to electronically g enerate a message authentication 

code ("MAC "); 

(d) electronically g enerating a MAC verification request by said secure 
payment application including said pseudo account number and said MAC; 

(e) electronically verifying said MAC; 

(f) based on said verification, creating an expected transaction sequence 
number (ETSN) for said MAC; 

(g) providing said secure payment application with reference data; 

(h) electronically creating a second message authentication code using said 
expected transaction sequence number and said per-card key; 

(i) electronically converting said second message authentication code into a 
pseudo expiration date using said reference data; 

(j) electronically g enerating an authorization request having an expiration 
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date field containing said pseudo expiration date; and 

(k) responding to said authorization request and verifying said second 
message authentication code based on said pseudo expiration date. 

4. (Original) The method of claim 3 wherein said per-card key is generated 
using a per BIN key. 

5 . (Currently amended) The method of claim 3- 3_wherein said MAC 
verification request further includes an expiration date of said payment account number, a 
version number and a transaction sequence number value, and wherein said step of verifying said 
MAC is based on said expiration date, said version number and said transaction sequence 
number value. 

6. (Original) The method of claim 5 wherein said step of creating said second 
message authentication code uses said version number. 

7. (Original) The method of claim 3 wherein said reference data includes a 
reference date and a number of months indicator. 

8. (Original) The method of claim 3 wherein said step of verifying said second 
message authentication code includes the following steps: 

determining said payment account number using said pseudo account number 
and a stored conversion table; 

determining said per-card key associated with said pseudo account number 
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using said payment account number and said pseudo account number; 

selecting a second expected transaction sequence number for which an 
associated message authentication code has not been verified; 

converting said third message authentication code into a second pseudo 
expiration date using second reference data, said second reference data being specified for said 
second expected transaction sequence number; 

comparing said second pseudo expiration date with said pseudo expiration 

date; and 

verifying said second message authentication code based on said comparison. 

9. (Original) The method of claim 8 wherein said second message 
authentication code is verified if said second pseudo expiration date matches said pseudo 
expiration date. 

1 0. (Currently amended) A method of conducting an electronic transaction 
over a public communications network, with a payment account number having an associated 
pseudo account number, comprising: 

(a) electronically p roviding said pseudo account number with a control field 
indicating one of a plurality of key-generation processes to be used to generate an authentication 
key; 

(b) electronically g enerating an authentication key associated with said 
pseudo account number using said one of said plurality of key-generation processes indicated in 
said control field of said pseudo account number; 

(c) using said authentication key to electronically g enerate a message 
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authentication code specific to said transaction; 

(d) electronically g enerating an authorization request message including said 
message authentication code and said pseudo account number; and 

(e) verifying the message authentication code using said indicated key- 
generation process and said authentication key. 

1 1 . (Original) The method of claim 10 wherein said authentication key is 
generated also using an authentication key derivation key on said pseudo account number. 

12. (Original) The method of claim 1 1 wherein said authentication key is 
generated also using a per-BIN key. 

1 3 . (Currently amended) A method of conducting an electronic transaction 
over a communications network with an account number, comprising: 

electronically g enerating a per-card key associated with said account number; 
electronically g enerating a message authentication code using said per-card 

key; 

providing at least two different operating modes for forwarding in different 
manners said message authentication code with an authorization request having different fields, 
at least one of said operating modes for forwarding said message authentication code in an 
expiration date field and at least one of said operating modes for forwarding said message 
authentication code in a message authentication code field. 



14. 
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(Original) The method of claim 13, wherein said message authentication code 
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is automatically conveyed in said message authentication code field if said message 
authentication code field exists. 
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